RHEL 3 : freeradius (RHSA-2004:609)

medium Nessus Plugin ID 15701

Synopsis

The remote Red Hat host is missing a security update.

Description

Updated freeradius packages that fix a number of denial of service vulnerabilities as well as minor bugs are now available for Red Hat Enterprise Linux 3.

FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized authentication and authorization for a network.

A number of flaws were found in FreeRADIUS versions prior to 1.0.1. An attacker who is able to send packets to the server could construct carefully constructed packets in such a way as to cause the server to consume memory or crash. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2004-0938, CVE-2004-0960, and CVE-2004-0961 to these issues.

Users of FreeRADIUS should update to these erratum packages that contain FreeRADIUS 1.0.1, which is not vulnerable to these issues and also corrects a number of bugs.

Solution

Update the affected freeradius package.

Plugin Details

Severity: Medium

ID: 15701

File Name: redhat-RHSA-2004-609.nasl

Version: 1.24

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 11/13/2004

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:3, p-cpe:/a:redhat:enterprise_linux:freeradius

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 11/12/2004

Vulnerability Publication Date: 11/3/2004

Reference Information

CVE: CVE-2004-0938, CVE-2004-0960, CVE-2004-0961

RHSA: 2004:609

Detections

Analytics